Skip to main content
cve.nowby Sazabi
← npm
npmPackage

mattermost-desktop

7 known vulnerabilities (2 medium, 5 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 2 medium, 5 low
Registry
npm

Advisories 7

  • Mattermost Desktop App logging sensitive information and fails to clear data on server deletion

    Affected: through 3.6.0.

  • macOS TCC Bypass via Code Injection

    Affected: fixed in 5.11.0.

  • Insufficient Electron Fuses Configuration

    Affected: fixed in 5.9.0.

  • Silent Desktop Screenshot Capture

    Affected: fixed in 5.9.0.

  • CVE-2024-39613Medium 5.3

    RCE in desktop app in Windows by local attacker

    Affected: fixed in 5.9.0.

  • CVE-2024-37182Medium 4.7

    Lack of permissions prompting when opening external URLs

    Affected: fixed in 5.8.0.

  • Bypass of TCC restrictions on macOS

    Affected: fixed in 5.8.0.